From 03ecc9fdf677802573fc5a992a97c1416553cd3c Mon Sep 17 00:00:00 2001 From: Dobin Rutishauser Date: Mon, 3 Jun 2024 09:51:25 +0200 Subject: [PATCH] refactor: remove hardcoded execution guards --- data/source/carrier/alloc_rw_rwx/template.c | 2 +- data/source/carrier/alloc_rw_rx/template.c | 2 +- data/source/carrier/peb_walk/template.c | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/data/source/carrier/alloc_rw_rwx/template.c b/data/source/carrier/alloc_rw_rwx/template.c index c24caad..7ee8d8c 100644 --- a/data/source/carrier/alloc_rw_rwx/template.c +++ b/data/source/carrier/alloc_rw_rwx/template.c @@ -19,7 +19,7 @@ int main() { // Execution Guardrail: Env Check wchar_t envVarName[] = L"USERPROFILE"; - wchar_t tocheck[] = L"C:\\Users\\hacker"; + wchar_t tocheck[] = L"C:\\Users\\"; WCHAR buffer[1024]; // NOTE: Do not make it bigger, or we have a __chkstack() dependency! DWORD result = GetEnvironmentVariableW(envVarName, buffer, 1024); if (result == 0) { diff --git a/data/source/carrier/alloc_rw_rx/template.c b/data/source/carrier/alloc_rw_rx/template.c index 458742f..896f6f8 100644 --- a/data/source/carrier/alloc_rw_rx/template.c +++ b/data/source/carrier/alloc_rw_rx/template.c @@ -19,7 +19,7 @@ int main() { // Execution Guardrail: Env Check wchar_t envVarName[] = L"USERPROFILE"; - wchar_t tocheck[] = L"C:\\Users\\hacker"; + wchar_t tocheck[] = L"C:\\Users\\"; WCHAR buffer[1024]; // NOTE: Do not make it bigger, or we have a __chkstack() dependency! DWORD result = GetEnvironmentVariableW(envVarName, buffer, 1024); if (result == 0) { diff --git a/data/source/carrier/peb_walk/template.c b/data/source/carrier/peb_walk/template.c index 4b9e768..24be0c6 100644 --- a/data/source/carrier/peb_walk/template.c +++ b/data/source/carrier/peb_walk/template.c @@ -43,7 +43,7 @@ int main() // Execution Guardrail: Env Check wchar_t envVarName[] = {'U','S','E','R','P','R','O','F','I','L','E', 0}; - wchar_t tocheck[] = {'C',':','\\','U','s','e','r','s','\\','h','a','c','k','e','r', 0}; // L"C:\\Users\\hacker" + wchar_t tocheck[] = {'C',':','\\','U','s','e','r','s','\\', 0}; WCHAR buffer[1024]; // NOTE: Do not make it bigger, or we have a __chkstack() dependency! DWORD result = ((DWORD(WINAPI*)(LPCWSTR, LPWSTR, DWORD))_GetEnvironmentVariableW)(envVarName, buffer, 1024); if (result == 0) {